CSRF issue exists @ src/main/webapp/vulnerability/csrf/change-info.jsp in branch refs/heads/master
Method info=request.getParameter at line 26 of src\main\webapp\vulnerability\csrf\change-info.jsp gets a parameter from a user request from ""info"". This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).
Severity: Medium
CWE:352
Vulnerability details and guidance
Checkmarx
Training
Recommended Fix
Lines: 26
Code (Line #26):
String info=request.getParameter("info");